| Current Path : /var/www/cesa.co.za/relay/include/ |
| Current File : /var/www/cesa.co.za/relay/include/sec.php |
<?php
if (isset($_POST['log_sub'])) {
$query="SELECT * FROM saace_user WHERE name LIKE '".preg_replace("/$/","",$_POST['username'])."' AND pass LIKE '".preg_replace("/$/","",$_POST['password'])."' AND status='1'";
$result=mysql_query($query);
if ($result) {
$row=mysql_fetch_assoc($result);
if ($row['rank']=='2') {
$_SESSION['aid']=$row['id'];
} elseif ($row['rank']=='3') {
$_SESSION['said']=$row['id'];
} elseif ($row['rank']=='4') {
$_SESSION['unid']=$row['id'];
} else {
$_SESSION['uid']=$row['id'];
}
$_SESSION['uname']=$row['title'];
}
}
?>